PRE-LAUNCH DRAFT · AUGUST 24, 2026

Privacy Policy

This policy describes the intended data handling for the U.S. launch of Kiffeurs. It must be finalized against the production infrastructure and reviewed before commercial launch.

1. Information Kiffeurs uses

The service may process your email address, password hash, goals, deadlines, reminder frequency, browser timezone, selected reminder channels, and account timestamps. If you choose text reminders, Kiffeurs also processes the U.S. mobile number you provide and records evidence of your SMS consent.

2. Why the data is used

Kiffeurs uses this information to authenticate your account, store your commitments, calculate deadline status, schedule reminders in your local timezone, deliver the channels you selected, prevent abuse, troubleshoot the service, and operate paid features if they are launched.

3. Messaging data

Mobile numbers and messaging consent are used to provide the text reminder program you explicitly selected. Kiffeurs does not intend to sell mobile opt-in data or use goal-reminder consent as permission for unrelated marketing messages.

4. Service providers

Production versions may use infrastructure, email, text messaging, push notification, payment, security, and analytics providers. Only providers actually deployed in production should be listed in the final policy before launch.

5. Retention

Account and commitment data should be retained only as long as needed to provide the service, meet security and legal obligations, resolve disputes, and support user-requested history features. The final retention schedule must be documented before production launch.

6. Your choices

You choose the reminder channels associated with a commitment. Text messaging is a separate opt-in. Reply STOP to a supported Kiffeurs text message to revoke the text channel. Device and browser controls may also disable push notifications. Channel opt-out does not necessarily delete the underlying commitment.

7. Security

Kiffeurs is designed to use hashed passwords, authenticated sessions, CSRF protection, per-user data isolation, HTTPS in production, and restricted access to production secrets. No online service can guarantee absolute security.

8. U.S. market

Kiffeurs is being designed primarily for users in the United States. The final policy must be reviewed against the states in which the service is offered and the final data-processing stack before launch.

9. Contact

A monitored privacy contact address and complete business contact details must be published before public launch. This pre-launch draft is not yet the final effective privacy notice.